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DEPARTMENT  OF  ENERGY 
10  CFR  Part  1008 

Privacy  Act;  Records  Maintained  on 
Individuals 

agency:  Department  of  Energy. 
action:  Final  rule. 

summary:  These  regulations  establish 
procedures  for  the  administration  of  the 
Privacy  Act  of  1974  by  the  Department 
of  Energy  (DOE).  Included  are  standards 
of  conduct  for  DOE  employees  under  the 
Pr  ivacy  Act,  procedures  by  which 
individuals  may  exercise  their  Privacy 
Act  rights  with  regard  to  DOE  systems 
of  records,  conditions  of  disclosure  for 
DOE  records  subject  to  the  Privacy  Act, 
and  provisions  regarding  the 
establishment  and  maintenance  of  DOE 
systems  of  records. 

These  regulations  were  published  in 
proposed  form  on  May  27, 1980,  at  45  FR 
35764.  A  detailed  discussion  of  the 
content  and  provisions  of  the 
regulations,  as  well  as  the  relationship 
of  the  regulations  to  the  Privacy  Act 
regulations  of  DOE's  predecessor 
agencies  (the  Federal  Energy 
Administration,  the  Energy  Research 
and  Development  Administration,  and 
the  Federal  Power  Commission),  was 
included  in  the  preamble  to  the 
proposed  regulation. 

These  regulations  supersede  the 
Privacy  Act  regulations  of  the 
predecessor  agencies  of  the  DOE,  the 
Federal  Energy  Administration  (FEA) 
and  the  Energy  Research  and 
Development  Administration  (ERDA), 
which  were  published  at  10  CFR  Part 
206  and  10  CFR  Part  708,  respectively. 
The  FEA  and  ERDA  regulations  at  10 
CFR  Part  206  and  10  CFR  Part  708  are. 
therefore,  revoked  as  of  the  effective 
date  of  these  regulations. 

The  pnly  comments  on  the  proposed 
regulations  were  submitted  by  the  OfHce 
of  Management  and  Budget  (OMB), 
which  has  oversight  responsibility  for 
the  Privacy  Act 

EFFECTIVE  DATE:  October  16, 1980. 

FOR  FURTHER  INFORMATION  CONTACT: 
Milton  Jordan,  Director,  Division  of 
Freedom  of  Information  and  Privacy 
Acts  Activities,  OfHce  of 
Administrative  Services,  Department 
of  Energy,  Room  5B-138,  Forrestal 
Building.  1000  Independence  Avenue, 
SW.,  Washington.  DC  20585,  (202) 
252-5955. 

Leslie  Borden  Greenspan,  Office  of 
General  Counsel,  Room  6A-067, 
Forrestal  Building,  1000  Independence 
Avenue,  SW.,  Washington,  DC  20585, 
(202)  252-86ia 


SUPPLEMENTARY  INFORM ATION:  As  noted 
above,  the  only  comments  on  the 
proposed  regulation  were  submitted  by 
OMB.  A  summary  of  each  of  OMB’s 
comments,  and  DOE’s  response,  is  set 
forth  below.  DOE  has  agreed  to  most  of 
OMB's  comments,  and  has  revised  the 
regulation  accordingly.  No  other 
substantive  changes  have  been  made, 
although  the  language  of  the  proposal 
has  been  clariHed  in  a  few  instances. 

1.  OMB  noted  an  inconsistency 
between  §  1008.6(b)(4)  of  the  proposed 
regulation,  which  pro^des  that 
individuals  are  required  to  include  a 
statement  justifying  the  need  for  a 
request  for  amendment  of  records,  while 
§  1008.6(e)  provided  that  individuals 
shall  not  be  required  to  justify  requests 
for  access,  amendment,  or  correction  of 
a  record.  Section  §  1008.6(e)  has 
accordingly  been  revised  to  remove  the 
reference  to  amendment  or  correction. 

2.  Subparagraphs  (1)  and  (2)  of 

§  100B.7(e)  of  the  proposed  regulation 
provided  that  DOE  would  seek  the 
concurrence  of  the  originating  agency 
before  releasing  records  which,  although 
in  DOE  files,  were  received  from 
another  agency.  OMB  pointed  out  that, 
under  the  Privacy  Act,  an  agency  is 
responsible  for  any  records  that  it 
maintains  in  a  system  of  records, 
regardless  whether  they  originated  with 
that  agency  or  were  received  from 
another  agency.  DOE  agrees  with  this 
observation,  and  subparagraphs  (1)  and 
(2)  have  been  deleted  in  the  final 
regulation. 

3.  The  procedure  for  providing  access 
to  medical  records  in  §  1008.8(c)  has 
been  clarified,  at  OMB’s  suggestion,  to 
provide  that  the  recommendation  to 
provide  access  through  a  health 
professional  will  be  made  by  the  DOE 
medical  officer,  and  not  the  system 
manager.  OMB  was  concerned  that  the 
system  manager  might  not  have  the 
necessary  expertise  to  make  such  a 
recommendation.  In  addition,  paragraph 
(c)  has  been  revised  to  state  that,  if  a 
requesting  individual  refuses  to  name  a 
physician  or  mental  health  professional 
or  to  submit  a  statement  from  his  own 
physician  or  mental  health  professional, 
the  action  will  be  treated  as  a  denial  of 
access,  and  the  individual  will  be  able 
to  exercise  the  appeal  rights  of 

§  1008.11. 

4.  Sections  1008.9(a)(1),  1008.19  (a)  and 
(b),  1008.20(a).  and  1008.21(b)  of  the 
proposed  regulation  provided  that 
requests  could  be  denied  based  on 
exemptions  claimed  by  another  agency. 
OMB  pointed  out  that,  regardless  of  the 
origin  of  a  record,  the  agency  that 
maintains  the  record  must  promulgate 
its  own  exemptions  to  the  extent  they 
are  applicable,  and  the  references  to 


other  agencies'  exemptions  have 
therefore  been  deleted. 

5.  Paragraph  (c)  of  §  1008.9  has  been 
deleted  in  its  entirety,  at  OMB’s 
suggestion.  The  first  sentence  of  that 
paragraph  had  stated  that  references  to 
other  individuals  than  the  subject  of  the 
record  would  be  deleted  before  access 
was  provided  to  the  subject  individual. 
This  provision  was  not  in  accordance 
with  the  Privacy  Act,  which  states  that 
individuals  must  be  provided  with  all 
information  contained  in  their  records, 
except  to  the  extent  that  any  of  it  was 
properly  exempted  from  access.  The 
second  sentence  of  paragraph  (c)  had 
stated  that  the  DOE  would  provide  an 
individual  with  a  report  of  the  contents 
ofirecords  which  could  not  otherwise  be 
provided  in  a  meaningful  form.  OMB 
noted  that  this  was  not  consonant  with 
the  Act,  which  mandates  that 
individuals  be  provided  with  a  copy  of 
their  records  in  a  form  which  is 
comprehensible  to  them.  It  is  not  DOE’s 
policy  to  provide  individuals  with  only  a 
summary  or  report  of  their  records. 
Copies  of  records  provided  to 
individuals  will  be  the  most 
comprehensible  that  can  be  made. 

6.  OMB  suggested  that  §  1008.10(c) 
include  a  section  on  where  to  appeal 
denials  of  records  in  the 
govemmentwide  systems  of  records 
maintained  by  the  Office  of  Personnel 
Management  (OPM).  Section  1008.10(c) 
has  not  been  changed,  because  OPM 
appeals  are  addressed  in  §  1008.11.  The 
wording  of  that  section,  ho  wever,  has 
been  clarified  to  emphasize  the 
distinction  in  appeal  rights  between 
DOE  and  OPM  government-wide 
records. 

7.  OMB  questioned  the 
appropriateness  of  several  of  the 
exemptions  claimed  by  the  DOE  in 
§  1008.12(b)  and  suggested  that  the 
section  be  revised  to  show  the 
justification  for  each  exempt  system. 
The  language  of  the  section  has  been 
modified  to  state  more  clearly  the  basis 
for  the  exemptions. 

Under  the  Privacy  Act,  exemptions 
from  certain  requirements  of  the  Privacy 
Act  may  be  established  only  by 
rulemaking,  with  notice  and  time  for 
comment  under  section  553  of  title  5, 
U.S.  Code.  With  the  exception  of  the 
investigative  files  of  the  Inspector 
General,  the  systems  of  records 
exempted  under  the  regulation  have 
been  exempted  under  DOE’s 
predecessor  agencies’  regulations.  The 
experience  of  those  agencies  has  not 
shown  their  exemptions  to  be 
inappropriate.  The  use  of  the 
exemptions,  once  they  have  been 
established,  is  permissive,  rather  than 
mandatory,  and  §  1008.9(d)(2)  provides 
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that  exemptions  may  be  waived  even 
when  they  may  be  applicable  to  a 
request.  Further,  requests  may  be  denied 
only  upon  a  determination  by  the 
system  manager  and  General  Counsel. 
DOE  will  assure  that  the 
appropriateness  of  exemptions  is 
carefully  considered  before  they  are 
invoked.  If  DOE’s  future  experience 
indicates  that  any  of  the  exemptions 
applied  to  systems  of  records  is  not 
appropriate,  DOE  will  revoke  the 
exemption. 

8.  OMB  also  suggested  that  the 
regulation  include  a  section  establishing 
a  Departmental  policy  to  assure  proper 
safeguards  of  records.  The  regulation  as 
drafted  includes  a  provision  in 

§  1008.3(b)(8)  requiring  DOE  employees 
to  handle  information  in  such  a  way  as 
to  insure  that  no  inadvertent  disclosure 
is  made.  In  addition,  DOE  has  an 
internal  order  providing  for  safeguarding 
of  sensitive  information,  including 
information  subject  to  the  Privacy  Act. 
Further,  DOE  is  in  the  process  of 
developing  an  internal  order  specifically 
for  the  administration  of  the  Privacy 
Act,  and  safeguards  will  be  addressed  in 
that  order. 

9.  Section  1008.20(b)  has  been 
clarified,  at  OMB’s  suggestion,  to  clarify 
the  circumstances  under  which  the 
Social  Security  Number  may  be 
collected. 

10.  OMB  suggested  that  the  regulation 
address  a  Privacy  Act  training  program 
for  the  DOE.  Training  will  be  developed 
for  DOE  employees  following  the 
issuance  of  this  regulation.  OMB  also 
suggested  that  the  regulation  address 
more  specifically  the  applicability  of 
subsection  (m)  of  the  Act.  Subsection 
(m)  requires  agencies  to  make  the 
Privacy  Act  applicable  to  contractor- 
operated  systems  of  records.  Section 
1008.1(c)  of  the  proposed  regulation 
provided  that  the  regulation  applies  to 
DOE  contractors  and  employees  who 
operate  systems  of  records  on  behalf  of 
the  DOE.  The  applicability  of  the  Act  to 
specific  contracts  will  be  addressed 
internally  on  a  case-by-case  basis, 
rather  than  through  rulemaking.  It  is  the 
DOE’s  view  that  a  case-by-case 
approach  is  less  cumbersome  than 
rulemaking,  because  the  circumstances 
of  each  contract  must  be  considered 
before  guidance  can  be  given.  Further, 
‘he  Federal  Procurement  Regulations 
mcude  provisions  on  the  applicability  of 
'he  Privacy  Act  to  government  contracts 
(41  CFR  1-1.327).  DOE’s  training, 
however,  will  include  guidance  for  DOE 
employees  on  the  applicability  of  the 
Privacy  Act  to  contracts.  Finally,  new 
§§  1008.15, 1008.19,  and  1008.24  have 
been  added  to  outline  the  criminal  euid 


civil  penalties  of  the  Act,  in  response  to 
OMB’s  recommendation. 

The  text  of  the  regulation  is  set  forth 
below. 

Issued  in  Washington,  D.C.,  on  September 
3, 1980. 

Charles  W.  Duncan,  Jr., 

Secretary. 

Title  10  of  the  Code  of  Federal 
Regulations  is  amended  as  follows: 

New  Part  1008  is  added  to  read  as  set 
forth  below: 

PART  1008— RECORDS  MAINTAINED 
ON  INDIVIDUALS  (PRIVACY  ACT) 

Subpart  A — General  Provisions 

Sec. 

1008.1  Purpose  and  scope. 

1008.2  Definitions. 

1008.3  Employee  standards  of  conduct  with 
regard  to  privacy. 

1008.4  Procedures  for  identifying  the 
individual  making  a  request  for  access  to 
or  amendment  of  records. 

1008.5  Effect  of  the  Freedom  of  Information 
Act  (FOIA). 

Subpart  B— Requests  for  Aocess  or 
Amendment 

1008.6  Proeedures  for  Privacy  Act  reqaeste. 

1008.7  Processing  of  requests. 

1008.8  ActicHR  in  response  to  a  request  for 
access:  disclosure  of  requested 
information  to  subject  individuals. 

1008.9  Action  in  response  to  a  request  for 
access:  initial  denial  of  access. 

1008.10  Action  in  response  to  a  request  for 
correction  or  amendment  of  records. 

1008.11  Appeals  of  denials  of  requests 
pursuant  to  §  1008.6. 

1008.12  Exemptions. 

1008.13  Fees. 

1008.14  Requests  under  false  pretenses. 

1008.15  Civil  remedies. 

Subpart  C— Disclosure  to  Third  Parties 

1008.16  Prohibition  against  disclosure. 

1008.17  Conditions  of  disclosure. 

1008.18  Accounting  for  disclosures. 

1008.19  Criminal  penalties — improper 
disclosure. 

Subpart  D— Maintenance  and  Establishment 
of  Systems  of  Records 

1008.20  Content  of  systems  of  records. 

1008.21  Collection  of  information  by  DOE 
about  an  individual  for  a  system  of 
records. 

1008.22  Use  and  collection  of  social  security 
numbers. 

1008.23  Public  notice  of  systems  of  records. 

1008.24  Criminal  penalties — failure  to 
publish  a  system  notice. 

Authority:  Department  of  Energy 
Organization  Act,  Pub.  L.  95-91,  Executive 
Order  12091, 42  FR  46267,  Privacy  Act  of  1974, 
Pub.  L.  93-579  (5  U.S.C.  552a). 

Subpart  A— General  Provisions 

§  1008.1  Purpose  and  scope. 

(a)  This  part  establishes  the 
procedures  to  implement  the  Privacy  Act 


of  1974  (Pub.  L  93-579,  5  U.S.C.  552a) 
within  the  Department  of  Energy. 

(b)  ’This  part  applies  to  all  systems  of 
records,  as  defined  in  §  1008.2(m), 
maintained  by  DOE. 

(c)  This  part  applies  to  all  divisions 
within  the  DOE,  and  to  the  personnel 
records  of  the  Federal  Energy 
Regulatory  Commission  (FERC),  which 
are  maintained  by  DOE  on  behalf  of 
FERC.  These  regulations  do  not  apply  to 
other  systems  of  records  maintained  by 
FERC.  These  regulations  also  apply  to 
DOE  contractors  and  their  employees  to 
the  extent  required  by  5  U.S.C.  552a(m). 

§  1008J2  Definitions. 

(a)  “Department”  or  “Department  of 
Energy  (DOE)”  means  all  organizational 
entities  which  are  a  part  of  the 
executive  department  created  by  Title  II 
of  the  Department  of  Energy 
Organization  Act,  Pub.  L.  95-91,  except 
the  Federal  Energy  Regulatory 
Commission  (FERC). 

(b)  “Director,  Office  of  Hearings  and 
Appeals”  means  the  Director  or  his 
delegate. 

(c)  “DOE  locations”  means  each  of  the 
following  DOE  components: 

(1)  Alaska  Power  Administratfoii,  P.O.  Box 
50,  Juneau,  AK  88801. 

(2)  Albuquerque  Operations  Office,  P.O. 
Box  5400,  Albuquerque,  NM  87115. 

Note. — ^This  ofiice  has  cognizance  over  the 
following  area  offices:  Amarillo,  Dayton, 
Kansas  Qty,  Los  Alamos,  Pinellas,  Rocky 
Platband  Sanria. 

(3)  Bartlesville  Energy  Technology  Center, 
P.O.  Box  1398,  Bartlesville,  OK  74003. 

(4)  Bonneville  Power  Administration,  P.O. 
Box  3621,  Portland,  OR  97268. 

(5)  Chicago  Operations  Office,  9800  South 
Cass  Avenue,  Ajgonne,  IL  60439. 

Note. — ^This  office  has  cognizance  over  the 
Batvia  and  Brookhaven  area  offices  and  the 
New  Brunswick  laboratory. 

(6)  Grand  Forks  Energy  Technology  Center, 
P.O.  Box  8213,  University  Station,  Grand 
Forks,  ND  58201. 

(7)  Grand  Junction  Office,  P.O.  Box  2567, 
Grand  Junction,  CO  81502. 

(8)  Headquarters,  Department  of  Energy, 
1000  Independence  Avenue,  SW., 
Washington,  DC  20585. 

(9)  Idaho  Operations  Office,  550  Second 
Street,  Idaho  Falls,  ID  83401. 

(10)  Laramie  Energy  Technology  Center, 
P.O.  Box  3395,  University  Station,  Laramie, 
WY  82070. 

(11)  Morgantown  Energy  Technology 
Center,  P.O.  Box  880,  Morgantown,  WV 
26505. 

(12)  Nevada  Operations  Office.  P.O.  Box 
14100,  Las  Vegas.  NV  89114. 

(13)  Oak  Ridge  Operations  Office.  P.O.  Box 
E,  Oak  Ridge,  TN  37830. 

(14)  Oak  Ridge  Technical  Information 
Center,  P.O.  Box  62,  Oak  Ridge,  TN  37830. 

(15)  Pittsburgh  Energy  Technology  Center, 
4800  Forbes  Avenue,  Pittsburgh,  PA  15213. 
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(16)  Region  L  Analex  Building,  Room  700, 

150  Causeway  Street,  Boston,  MA  02114. 

(17)  Region  II,  26  Federal  Plaza,  Room  3206, 
New  York,  NY  10007, 

(16)  Region  III,  1421  Cherry  Street,  10th 
Floor,  Philadelphia,  PA  19102. 

(19)  Region  IV,  1655  Peachtree  Street,  NE., 
8th  Floor.  Atlanta,  GA  30309. 

(20)  Region  V,  175  West  Jackson  Boulevard, 
Room  A-333.  Chicago,  IL  60604. 

(21)  Region  VI,  P.O.  Box  35228,  2626  West 
Mockingbird  Lane,  Dallas,  TX  75235. 

(22)  Region  VII,  Twelve  Grand  Building, 

1150  Grand  Avenue,  Kansas  City,  MO  64106. 

(23)  Region  VIII.  P.O.  Box  26247 — Belmar 
Branch,  1075  South  Yukon  Street,  Lakewood, 
CO  80226. 

(24)  Region  IX,  111  Pine  Street,  Third  Floor, 
San  Francisco,  CA  94111. 

(25)  Region  X,  1992  Federal  Building.  915 
Second  Avenue,  Seattle,  WA  98174. 

(26)  Richland  Operations  Office,  P.O.  Box 
550.  Richland,  WA  99352. 

(27)  San  Francisco  Operations  O^ce,  1333 
Broadway,  Wells  Fargo  Building,  Oakland, 

CA  94612. 

(28)  Savannah  River  Operations  Office, 

P.O.  ^x  “A,"  Aiken.  SC  29801. 

(29)  Southeastern  Power  Administration, 
Elberton,  CA  30635. 

(30)  Southwestern  Power  Administration, 
P.O.  Drawer  619,  Tulsa,  OK  74101. 

(31)  Western  Area  Power  Administration. 
P.O.  Box  3402,  Golden,  CO  80401. 

(d)  “General  Counsel"  means  the 
General  Counsel  provided  for  in  Section 
202(b)  of  the  Department  of  Energy 
Organization  Act,  or  any  DOE  attorney 
designated  by  the  General  Counsel. 

(e)  “Headquarters’*  means  all  DOE 
facilities  functioning  within  the 
Washington,  D.C.  metropolitan  area. 

(f)  “Individual"  means  a  citizen  of  the 
United  States  or  an  alien  lawfully 
admitted  for  permanent  residence,  but 
does  not  include  proprietorships, 
businesses,  or  corporations.  Vlhiere 
appropriate,  the  term  “individual"  also 
includes  a  duly  authorized 
representative  of  an  individual. 

(g)  “Maintain”  means  maintain, 
collect,  use,  or  disseminate. 

(h)  “Privacy  Act  Officer"  means  the 
person  designated  by  the  Director, 

Office  of  Administration,  as  responsible 
for  administering  the  DOE's  program  for 
implementing  the  requirements  of  the 
Privacy  Act  of  1974  at  the  DOE  locations 
listed  at  §  1008.2(c). 

(i)  “Record"  means  any  item, 
collection,  or  grouping  of  information 
about  an  individual  that  is  maintained 
by  or  for  the  DOE  including,  but  not 
limited,  to  education,  financial 
transactions,  medical  history,  and 
criminal  or  employment  history,  and 
that  contains  that  individual's  name,  or 
other  identifying  number,  symbol,  or 
other  identifying  particulars  assigned  to 
the  individual,  such  as  a  finger  or  voice 
print  or  photograph.  See  subsection 

(a)(4)  of  the  Act. 


(j)  “Routine  use”  means,  with  respect 
to  the  disclosure  of  a  record,  the  use  of 
such  record  for  a  purpose  which  is 
compatible  with  the  purpose  for  which  it 
was  collected.  See  subsection  (a)(7)  of 
the  Act. 

(k)  “Statistical  record"  means  a  record 
in  a  system  of  records  maintained  for 
statistical  research  or  reporting 
purposes  only  and  not  used  in  whole  or 
in  part  in  making  any  determination 
about  an  identifiable  individual,  except 
as  provided  by  13  U.S.C.  section  8.  See 
subsection  (a)(6)  of  the  Act. 

(l)  “System  Manager"  means  the  DOE 
official  who  is  responsible  for  a  system 
of  records  as  designated  in  the  system 
notice  of  that  system  of  records 
published  by  DOE. 

(m)  “System  of  records"  means  a 
group  of  any  records  under  DOE  control 
from  which  information  is  retrieved  by 
the  name  of  the  individual  or  by  some 
identifying  number,  symbol,  or  other 
identifying  particulars  assigned  to  the 
individual.  See  subsection  (a)(5)  of  the 
Act. 

(n)  “Act"  means  the  Privacy  Act  of 
1974,  F>ub.  L,  93-579;  references  to 
subsections  of  the  Act  mean  subsections 
of  section  3  of  the  Act, 

§  1008.3  Employee  standards  of  conduct 
with  regard  to  privacy. 

(a)  The  Headquarters  DOE  Privacy 
Act  Officer  shall  assure  that  DOE 
personnel  are  advised  of  the  provisions 
of  the  Privacy  Act.  including  the 
criminal  penalties  and  civil  liabilities 
provided  therein,  (subsections  (g)  and  (i) 
of  the  Act),  and  that  DOE  personnel  are 
made  aware  of  their  responsibilities:  to 
protect  the  security  of  personal 
information  to  assure  its  accuracy, 
relevance,  timeliness  and  completeness; 
to  avoid  unauthorized  disclosure;  and  to 
insure  that  no  system  of  records 
concerning  individuals,  no  matter  how 
insignificant  or  specialized,  is 
maintained  without  public  notice. 

(b)  DOE  personnel  shall: 

(1)  Collect  or  maintain  no  information 
of  a  personal  nature  about  individuals 
unless  relevant  and  necessary  to 
achieve  a  purpose  or  carry  out  a 
responsibility  of  the  DOE  as  required  by 
•statute  or  by  Executive  Order.  See 
subsection  (e)(1)  of  the  Act  and 

§  1008.1Q(a). 

(2)  Collect  information,  wherever 
possible,  directly  from  the  individual  to 
whom  it  pertains.  See  subsection  (e)(2) 
of  the  Act  and  §  1009.19(a). 

(3)  Inform  individuals  from  whom 
information  is  collected  of  the  authority 
for  collection,  the  principal  purposes  for 
which  the  information  will  be  used,  the 
routine  uses  that  will  be  made  of  the 
information,  and  the  effects  of  not 


furnishing  the  information.  See 
subsection  (e)(3)  of  the  Act  and 
§  1008.19(b). 

(4)  Collect,  maintain,  use  or 
disseminate  no  information  concerning 
an  individual's  rights  guaranteed  by  the 
First  Amendment,  unless  (i)  the 
individual  has  volunteered  such;  or  (ii) 
the  information  is  expressly  authorized 
by  statute  to  be  collected,  maintained, 
used  or  disseminated;  or  (iii)  the 
activities  involved  are  pertinent  to  and 
within  the  scope  of  an  authorized  law 
enforcement  activity.  See  subsection 
(e)(7)  of  the  Act  and  §  1008.18(b). 

(5)  Advise  their  supervisors  of  the 
existence  or  proposal  of  any  system  of 
records  which  retrieves  information 
about  individuals  by  the  individual’s 
name  or  other  identifying  number, 
symbol,  or  identifying  particulars 
assigned  to  the  individual. 

(6)  Maintain  an  accounting,  in  the 
prescribed  form,  of  all  disclosures  of 
information  other  than  those  to  officers  . 
or  employees  who  have  a  need  for  the 
record  in  the  performance  of  their  duties 
and  those  required  under  the  Freedom  of 
Information  Act.  See  subsection  (c)  of 
the  Act 

(7)  Disclose  no  records  other  than  to 
DOE  personnel  without  the  advance 
written  consent  of  the  individual,  except 
as  authorized  by  5  U.S.C.  552a(b) 
including  routine  uses  published  in  the 
Federal  Register. 

(8)  Maintain  and  process  information 
concerning  individuals  with  care  to 
insure  that  no  inadvertent  disclosure  of 
the  information  is  made.  See  subsection 
(e)(10)  of  the  Act. 

(9)  Inform  the  proper  DOE  authorities 
of  any  information  maintained  in  a  DOE 
system  of  records  which  is  not 
authorized  by  the  Privacy  Act  of  1974. 

(c)  Heads  of  Headquarters  Divisions 
and  Offices  and  heads  of  the  other  DOE 
locations  shall  review  annually  the 
systems  of  records  subject  to  their 
responsibility  to  insure  compliance  with 
the  requirements  of  the  Privacy  Act  of 
1974. 

§  1008.4  Procedures  for  identifying  the 
individual  making  a  request  for  access  to  or 
amendment  of  records. 

(a)  When  a  request  for  information 
about  or  for  access  to  or  correction  of  a 
record  pertaining  to  an  individual  and 
contained  in  a  system  of  records  has 
been  made  pursuant  to  §  1008.6,  valid 
identification  of  the  individual  making 
the  request  shall  be  required  before 
information  will  be  given,  access 
granted  or  a  correction  considered,  to 
insure  that  information  is  given, 
corrected,  or  records  disclosed  or 
corrected  only  at  the  request  of  the 
proper  person. 
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(b)  Subject  to  paragraphs  (c)  and  (d) 
of  this  section,  an  individual  making  a 
request  may  establish  his  identity  by: 

(1)  Including  with  his  request,  if 
submitted  by  mail,  a  photocopy  of  two 
identifying  documents  bearing  his  name 
and  signature,  one  of  which  shall  bear 
his  current  home  or  business  address 
and  date  of  birth;  or 

(2)  Appearing  at  the  appropriate  DOE 
location  during  the  regular  business 
hours  and  presenting  either  of  the 
following: 

(i)  One  identifying  document  bearing 
the  individual’s  photograph  and 
signature,  such  as  a  driver's  license  or 
passport;  or 

(ii)  Two  identifying  documents 
bearing  the  individual’s  name  and 
signature,  one  of  which  shall  bear  the 
individual’s  current  home  or  business 
address  and  date  of  birth;  or 

(3)  Providing  such  other  proof  of 
identity  as  the  Privacy  Act  Officer 
deems  satisfactory  in  the  circumstances 
of  a  particular  request. 

(c)  If  the  Privacy  Act  Officer  or  the 
appropriate  System  Manager  determines 
that  the  information  in  a  record  is  so 
sensitive  that  unauthorized  access  could 
cause  harm  or  embarrassment  to  the 
individual  whose  record  in  involved,  or 
if  the  individual  making  the  request  is  . 
unable  to  produce  satisfactory  evidence 
of  identity  under  paragraph  (b)  or  (d)  of 
this  section,  the  individual  making  the 
request  may  be  required  to  submit  a 
notarized  statement  attesting  to  his 
identity  and  his  understanding  of  the 
criminal  penalties  provided  imder 
section  1001  of  Title  18  of  the  United 
States  Code  for  making  false  statements 
to  a  Government  agency  and  under 
subsection  (i][3)  of  the  Act  for  obtaining 
records  imder  false  pretenses.  Copies  of 
these  statutory  provisions  and  forms  of 
such  notarized  statements  may  be 
obtained  upon  request  from  the  Privacy 
Act  Officer,  Headquarters,  Department 
of  Energy,  Washington,  D.C. 

(d)  When  an  individual  acting  as  the 
parent  of  a  minor  or  the  legal  guardian 
of  the  person  to  whom  a  record  pertains 
makes  a  request  pursuant  to  §  1008.6  of 
this  part — 

(1)  Such  an  individual  shall  establish 
his  personal  identity  in  the  same  manner 
required  in  either  paragraph  [b]  or  (c)  of 
this  section. 

(2)  In  addition,  such  an  individual 
shall  establish  his  identity  in  the 
representative  capacity  of  parent  or 
legal  guardian.  In  the  case  of  the  parent 
of  a  minor,  the  proof  of  identity  shall  be 
a  certified  or  authenticated  copy  of  the 
minor’s  birth  certificate.  In  the  case  of 
the  legal  guardian  of  a  person  who  has 
been  declared  incompetent  due  to 
physical  or  mental  incapacity  or  age  by 


a  court  of  competent  jurisdiction,  the 
proof  of  identity  shall  be  a  certified  or 
authenticated  copy  of  the  order  from  a 
court  of  competent  jurisdiction. 

(3)  A  parent  or  legal  guardian  may  act 
only  for  a  living  individual,  not  for  a 
decedent.  Requests  for  the  records  of 
decedents  will  be  handled  under  the 
Freedom  of  Information  Act  (5  U.S.C. 

552). 

§  1008.5  Effect  of  the  Freedom  of 
Information  Act  (FOIA). 

(a)  DOE  shall  not  rely  on  any 
exemption  contained  in  the  Freedom  of 
Information  Act  (5  U.S.C.  552)  to 
withhold  &om  the  individual  to  whom  it 
pertains,  any  record  which  is  otherwise 
accessible  to  such  individual  under  this 
part. 

(b)  DOE  shall  rely  on  subsection  (b)  of 
the  Wvacy  Act  to  withhold  information 
from  a  person  other  than  the  person  to 
whom  ^e  record  pertains  only  when  the 
information  is  also  exempt  from 
disclosure  under  the  FOIA. 

(c)  Where  a  request  for  access  to 
records  is  submitted  pursuant  to  both 
the  FOIA  and  the  Privacy  Act,  the  DOE 
shall,  to  the  maximum  extent  possible, 
process  the  request  under  the  provisions 
of  this  part,  including  the  time  limits  of 
this  part. 

Subpart  B— Requests  for  Access  or 
Amendment 

f  1008.6  Procedures  for  Privacy  Act 
requests. 

(a)  Any  individual  may — 

(1)  Ask  the  DOE  whether  a  system  of 
records  maintained  by  the  DOE  contains 
records  about  him  or  her; 

(2)  Request  access  to  information 
pertaining  to  him  or  her  that  is 
maintained  in  a  DOE  system  of  records; 

(3)  Request  that  information  about 
him  or  her  in  a  DOE  system  of  records 
be  amended  or  corrected.  Requests  for 
correction  or  amendment  may  include 
inquiries  concerning — 

(i)  whether  such  information  is 
relevant  or  necessary  to  accomplish  a 
purpose  that  DOE  is  required  to 
accomplish  by  statute  or  Executive 
Order,  or 

(ii)  if  the  information  is  to  be  used  by 
the  DOE  in  making  a  determination 
about  the  individual,  whether  the 
information  is  as  accurate,  relevant, 
timely,  or  complete  as  is  reasonably 
necessary  to  assure  fairness  in  the 
determination. 

(b)  Requests  submitted  pursuant  to 
this  section  shall — 

(1)  Be  in  writing  and  signed  by  the 
individual  making  the  request; 

(2)  State  that  the  request  is  a  “Privacy 
Act  Access’’  or  “Privacy  Act 
Amendment’’  request; 


(3)  Include  the  identiHcation 
information  required  by  §  1008.4; 

(4)  Specify,  if  possible,  the  title  and 
identifying  number  of  the  system  of 
records  as  listed  in  DOE’s  published 
notices  of  system  of  records; 

(5)  Provide  if  possible  any  additional 
information  to  aid  DOE  in  responding  to 
the  request,  for  example,  a  description 
of  the  records  sought; 

(6)  Indicate,  as  appropriate,  the  time, 
place,  and  form  of  access  sought 

(c)  Any  request  not  addressed  and 
marked  as  specified  in  paragraph  (a)  of 
this  section  shall  be  forwarded 
immediately  to  the  appropriate  Privacy 
Act  Officer.  An  improperly  addressed 
request  will  not  be  deemed  to  have  been 
received  for  purposes  of  measuring  time 
periods  pursuant  to  §  §  1008.7  and 
1008.10  until  actual  receipt  by  the 
appropriate  Privacy  Act  Officer.  The 
in^vidual  making  the  request  shall  be 
notified  that  the  request  was  improperly 
addressed  and  the  date  when  the 
request  was  received  by  the  Privacy  Act 
Officer. 

(d)  Assistance  in  preparing  an  access 
request  pursuant  to  this  section  may  be 
obtained  from  any  DOE  Privacy  Act 
Officer  at  the  locations  listed  at 

§  1008.2(e). 

(e)  An  individual  shall  not  be  required 
to  state  a  reason  or  otherwise  justify  his 
request  for  information  or  access  to  a 
record  pertaining  to  him/her  that  is 
contained  in  a  system  of  records. 

§  1008.7  Processing  of  requests. 

(a)  Receipt  of  a  request  made  in 
accordance  with  §  1008.6  shall  be 
promptly  acknowledged  by  the  Privacy 
Act  Officer. 

(b)  Each  request  shall  be  acted  upon 
promptly.  Every  effort  will  be  made  to 
respond  within  ten  working  days  of  the 
date  of  receipt  by  the  System  Manager 
or  designee.  If  a  response  cannot  be 
made  within  ten  working  days,  the 
appropriate  Privacy  Act  Officer  shall 
send  an  interim  response  providing 
information  on  the  status  of  the  request, 
including  an  estimate  of  the  time  within 
which  action  is  expected  to  be  taken  on 
the  request  and  asking  for  any  further 
information  as  may  be  necessary  to 
respond  to  the  request.  Action  will  be 
completed  as  soon  as  possible,  but  not 
later  than  20  working  days  after  receipt 
of  the  original  specific  inquiry.  In 
unusual  circumstances  and  for  good 
cause,  the  appropriate  Privacy  Act 
Officer  may  decide  that  action  cannot 
be  completed  within  the  initial  20 
working  days.  In  such  case,  the 
appropriate  Privacy  Act  Officer  will 
advise  the  individual  of  the  reason  for 
the  delay  and  the  date  (not  to  exceed  an 
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additional  20  working  days)  by  which 
action  can  be  expected  to  be  completed. 

(c)  The  term  “unusual  circumstances” 
as  used  in  this  section  includes 
situations  where  a  search  for  requested 
records  from  inactive  storage  is 
necessary,  cases  where  a  voluminous 
amount  of  data  is  involved;  instances 
where  information  on  other  individuals 
must  be  separated  or  expunged  from  the 
particular  record:  and  cases  where 
consultation  with  other  agencies  which 
have  substantial  interest  in  the  response 
to  the  request  is  necessary. 

(d)  Upon  receiving  a  request,  the 
Privacy  Act  Officer  shall  ascertain 
which  System  Manager  or  Managers  of 
the  DOE  have  primary  responsibility  for, 
custody  of,  or  concern  with  the  system 
or  systems  of  records  subject  to  the 
request  and  shall  forward  the  request  to 
such  System  Manager  or  Managers.  The 
System  Manager  or  Managers  shall 
promptly  identify  and,  in  consultation 
with  the  General  Counsel,  review  the 
records  encompassed  by  the  request. 

(e)  Where  the  request  is  for  access  to 
or  information  about  records,  after 
reviewing  the  material  the  System 
Manager  or  Managers  concerned  shall 
transmit  to  the  Privacy  Act  Officer  the 
requested  material.  The  transmission  to 
the  Privacy  Act  Officer  shall  include  any 
recommendation  that  the  request  be 
granted  or  wholly  or  partially  denied 
and  shall  set  forth  any  exemption 
categories  supporting  denials.  Any 
denial  recommendation  must  be 
concurred  in  by  the  appropriate  General 
Counsel. 

(f)  Where  the  request  is  for  correction 
or  amendment  of  records,  after 
reviewing  the  material  the  System 
Manager  or  Managers  shall  transmit  a 
recommended  decision  to  the  Privacy 
Act  Officer.  Any  recommendation  that 
the  request  be  granted  or  wholly  or 
partially  denied  shall  cite  the  exemption 
relied  on  and  set  forth  the  policy 
considerations  supporting  a  denial.  Any 
recommendation  of  denial  must  be 
concurred  in  by  General  Counsel. 

§  1008.8  Action  in  response  to  a  request 
for  access:  disclosure  of  requested 
information  to  subject  individuals. 

(a)  Consistent  with  the 
recommendation  of  the  System  Manager 
and  the  concurrence  of  the  appropriate 
General  Counsel,  the  Privacy  Act 
Officer  shall  provide  to  the  requesting 
individual  the  information  about  or 
access  to  a  record  or  information 
pertaining  to  the  individual  contained  in 
a  system  of  records,  unless  the  request 
is  being  denied  in  accordance  with 
§  1008.9  of  this  part.  The  Privacy  Act 
Officer  shall  notify  the  individual  of 


such  determination  and  provide  the 
following  information: 

(1)  Whether  there  is  information  or  a 
record  pertaining  to  him  that  is 
contained  in  a  system  of  records; 

(2)  The  methods  of  access  as  set  forth 
in  paragraph  (b)  of  this  section; 

(3)  The  place  at  which  the  record  or 
information  may  be  injected; 

(4)  The  earliest  date  on  which  the 
record  or  information  may  be  inspected 
and  the  period  of  time  that  the  record  or 
information  will  remain  available  for 
inspection.  In  no  event  shall  the  earliest 
date  be  later  than  thirty  calendar  days 
from  the  date  of  notification. 

(5)  An  indication  that  copies  of  the 
records  are  enclosed,  or  the  estimated 
date  by  which  a  copy  of  the  record  could 
be  mailed  and  the  estimate  of  fees  that 
would  be  charged  to  provide  other  than 
the  first  copy  of  the  record,  pursuant  to 

§  1008.13, 

(6)  The  fact  that  the  individual,  if  he 
wishes,  may  be  accompanied  by  another 
person  during  the  in-person  review  of 
the  record  or  information,  provided  that 
the  individual  shall  first  furnish  to  the 
Privacy  Act  Officer  a  written  statement 
authorizing  disclosure  of  that 
individual's  record  in  the  accompanying 
person’s  presence:  and 

(7)  Any  additional  requirements  that 
must  be  satisfied  in  order  to  provide 
information  about  or  to  grant  access  to 
the  requested  record  or  information. 

(b)  "rhe  following  methods  of  access  to 
records  or  information  pertaining  to  an 
individual  and  contained  in  a  system  of 
records  may  be  available  to  that 
individual  depending  on  the 
circumstances  of  a  particular  request: 

(1)  A  copy  of  the  record  may  be 
enclosed  with  the  initial  response  in 
accordance  with  paragraph  (a)  of  this 
section; 

(2)  Inspection  in  person  may  be 
arranged  during  the  regular  business 
hours  of  the  DOE  in  the  office  specified 
by  the  Privacy  Act  Officer; 

(3)  Transfer  of  records  to  a  Federal 
facility  more  convenient  to  the 
individual  may  be  arranged,  but  only  if 
the  Privacy  Act  Officer  determines  that 
a  suitable  facility  is  available,  that  the 
individual’s  access  can  be  properly 
supervised  at  that  facility,  and  that 
transmittal  of  the  records  or  information 
to  that  facility  will  not  unduly  interfere 
with  operations  of  the  DOE  or  involve 
unreasonable  costs,  in  terms  of  money 
or  manpower,  and 

(4)  The  requested  number  of  copies  in 
addition  to  the  initial  copy  may  be 
mailed  at  the  request  of  the  individual, 
subject  to  payment  of  the  fees 
prescribed  in  §  1008.13. 

(c)  If  the  Piivacy  Act  Officer  believes, 
based  upon  a  recommendation  of  the 


System  Manager  and  the  agency’s 
medical  officer,  that  disclosure  of 
medical  and/or  psychological 
information  directly  to  an  individual 
could  have  an  adverse  effect  upon  that 
individual,  the  individual  may  be  asked: 

(1)  To  designate  in  writing  a  physician 
or  mental  health  professional  to  whom 
he  would  like  the  records  to  be 
disclosed;  or 

(2)  To  submit  a  signed  statement  by 
his  physician  or  a  mental  health 
professional  indicating  that,  in  his  view, 
disclosure  of  the  requested  records  or 
information  directly  to  the  individual 
will  not  have  an  adverse  effect  upon  the 
individual.  If  the  individual  refuses  to 
designate  a  physician  or  mental  health 
professional,  or  to  submit  a  signed 
statement  from  his  physician  or  mental 
health  professional  as  provided  in 
paragraph  (c)  (1)  and  (2)  of  this  section, 
the  request  will  be  considered  denied, 
and  the  appeal  rights  provided  in 

§  1008.11  will  be  available  to  the 
individual. 

(d)  The  Privacy  Act  Officer  shall 
supply  such  other  information  and 
assistance  at  the  time  of  an  individual’s 
review  of  his  record  as  is  necessary  to 
make  the  record  intelligible  to  the 
individual. 

-  (e)  The  DOE  will,  as  required  by 

subsection  (d)(l],  assure  an  individual’s 
right  “to  review  his  or  her  record  and 
have  a  copy  made  of  all  or  any  portion 
thereof  in  a  form  comprehensible  to 
him.”  However,  original  records  will  be 
made  available  to  individuals  only 
under  the  supervision  of  the  Privacy  Act 
Officer  or  his  designee.  Individuals  will 
be  provided  at  their  request  with  a  copy, 
but  not  the  original,  of  records 
pertaining  to  them. 

§  1008.9  Action  in  response  to  a  request 
for  access:  initial  denial  of  access. 

(a)  A  request  by  an  individual  for 
information  about  or  access  to  a  record 
or  information  pertaining  to  that 
individual  that  is  contained  in  a  system 
of  records  may  be  denied  only  upon  a 
determination  by  the  appropriate 
System  Manager,  with  the  concurrence 
of  the  appropriate  General  Counsel, 
that: 

(1)  The  record  is  subject  to  an 
exemption  under  §  1008.12; 

(2)  The  record  is  information  compiled 
in  reasonable  anticipation  of  a  civil 
action  or  proceeding;  or 

(3)  The  individual  has  unreasonably 
failed  to  comply  with  the  procedural 
requirements  of  this  part. 

(b)  The  Privacy  Act  Officer  shall  give 
written  notice  of  the  denial  of  a  request 
of  information  about  or  access  to 
records  or  information  pertaining  to  the 
individual  and  contained  in  a  system  of 
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records.  Such  written  notice  shall  be 
sent  by  certified  or  registered  mail, 
return  receipt  requested  and  shall 
include  the  following  information: 

(1)  The  System  Manager’s  name  and 
title; 

(2)  The  reasons  for  the  denial, 
including  citation  to  the  appropriate 
sections  of  the  Privacy  Act  and  this  part: 
and 

(3)  Notification  of  the  individual’s 
right  to  appeal  the  denial  pursuant  to 
§  1008.11  and  to  administrative  and 
judicial  review  under  5  U.S.C. 
552a(g)(l)(B),  as  limited  by  552a(g)(5). 

(c)  Nothing  in  this  section  shall; 

(1)  Require  the  furnishing  of 
information  or  records  that  are  not 
retrieved  by  the  name  or  by  some  other 
identifying  number,  symbol  or 
identi^ng  particular  of  the  individual 
making  the  request; 

(2)  Prevent  a  System  Manager  from 
waiving  any  exemption  authorizing  the 
denial  of  records,  in  accordance  with 

§  1008.12. 

§  1008.10  Action  in  response  to  a  request 
for  correction  or  amendment  of  records. 

(a)  The  Privacy  Act  Officer  must 
respond  in  writing  to  the  requester  for 
amendment  of  a  record  within  10 
working  days  of  receipt.  This  response 
shall  inform  the  requester  of  the 
decision  whenever  possible. 

(b)  If  the  decision  cannot  be  reached 
within  10  working  days,  the  requester 
shall  be  informed  of  the  reason  for  delay 
and  the  date  (within  20  working  days)  it 
is  expected  that  the  decision  will  be 
made. 

(c)  The  Privacy  Act  Officer,  consistent 
with  the  recommendation  of  the  System 
Manager  or  Managers,  as  concurred  in 
by  the  appropriate  General  Counsel,  if 
appropriate,  shall  do  one  of  the 
following: 

(1)  Instruct  the  System  Manager  to 
make  the  requested  correction  or 
amendment;  and  advise  the  individual  in 
writing  of  such  action,  providing  either  a 
copy  of  the  corrected  or  amended 
record,  or  a  statement  as  to  the  means 
whereby  the  correction  or  amendment 
was  accomplished  in  cases  where  a 
copy  cannot  be  provided  (for  example, 
erasure  of  information  from  a  record 
maintained  only  in  an  electronic  data 
bank);  or 

(2)  Inform  the  individual  in  writing 
that  his  request  is  denied  in  whole  or  in 
part.  Such  denial  shall  be  sent  by 
certified  or  registered  mail,  return 
receipt  requested,  and  shall  provide  the 
following  information: 

(i)  The  System  Manager’s  name  and 
title; 


(ii)  The  reasons  for  the  denial; 
including  citation  to  the  appropriate 
sections  of  the  Act  and  this  part;  and 

(iii)  Notification  of  the  UKhvidual’s 
right  to  appeal  the  denial  pursuant  to 
§  1008.11  and  to  administrative  and 
judicial  review  under  5  U.S.C. 
552a[g)(l}(B],  as  limited  by  5  U.S.C. 
552a(g)(5). 

(iv)  Notification  of  the  right  of  the 
individual  to  submit  a  statement  of 
disagreement  consistent  with 

§  1008.11(g). 

(b)  Whenever  an  individual’s  record  is 
amended  pursuant  to  a  request  by  that 
individual,  the  Privacy  Act  Officer  or  the 
System  Manager,  as  appropriate,  shall 
notify  all  persons  and  agencies  to  which 
the  amended  portion  of  the  record  had 
been  disclosed  prior  to  its  amendment,  if 
an  accounting  of  such  disclosure  was 
required  by  the  Act.  The  notification 
shall  request  a  recipient  agency 
maintaining  the  record  to  acknowledge 
receipt  of  the  notification,  to  correct  or 
amend  the  record  and  to  apprise  an 
agency  or  person  to  which  it  had 
disclosed  the  record  of  the  substance  of 
the  amendment. 

(c)  The  following  criteria  will  be  taken 
into  account  by  the  DOE  in  reviewing  a 
request  for  amendment: 

(1)  The  sufficiency  of  the  evidence 
submitted  by  the  individual; 

(2)  The  factual  accuracy  of  the 
information: 

(3)  The  relevance  and  necessity  of  the 
information  in  relation  to  the  purpose 
for  which  it  was  collected; 

(4)  If  such  information  is  used  in 
making  any  determination  about  the 
individual,  whether  the  information  is  as 
accurate,  relevant,  timely,  and  complete 
as  is  reasonably  necessary  to  assure 
fairness  to  the  individual  in  such 
determination; 

(5)  The  degree  of  possibility  that 
denial  of  the  request  could  unfairly 
result  in  a  determination  adverse  to  the 
individual; 

(6)  The  nature  of  the  record  sought  to 
be  corrected  or  amended;  and 

(7)  The  propriety  and  feasibility  of 
complying  with  the  specific  means  of 
amendment  requested  by  the  individual. 

(d)  The  DOE  will  not  undertake  to 
gather  evidence  for  the  individual,  but 
does  reserve  the  right  to  verify  the 
evidence  that  the  individual  submits. 

(e)  Amendment  of  a  record  requested 
by  an  individual  may  be  denied  upon  a 
determination  that: 

(1)  The  individual  has  failed  to 
establish,  by  a  preponderance  of  the 
evidence,  the  propriety  of  the 
amendment  in  relation  to  the  criteria 
stated  in  paragraph  (c)  of  this  section; 

(2)  The  record  sought  to  be  amended 
was  compiled  in  a  terminated  judicial. 


quasi-judicial  or  quasi-legislative 
proceeding  to  which  the  individual  was 
a  party  or  participant; 

(3)  The  record  sought  to  be  amended 
is  the  subject  of  a  pending  judicial, 
quasi-judicial  or  quasi-legislative 
proceeding  to  which  the  individual  is  a 
party  or  participant; 

(4)  The  amendment  would  violate  a 
duly  enacted  statute  or  promulgated 
regulation; 

(5)  The  individual  has  unreasonably 
failed  to  comply  with  the  procedural 
requirements  of  this  part;  or 

(6)  The  record  has  been  properly 
exempted  from  the  provisions  of 
subsection  (d)  of  the  Act 

(f)  Nothing  in  this  section  shall  restrict 
the  DOE  from  granting  in  part  or 
denying  in  part  a  request  for  amendment 
of  records. 

§  1008.1 1  Appeals  of  denials  of  requests 
pursuant  to  §  1008.6. 

(a)  Any  individual  may  appeal  the 
denial  of  a  request  made  by  him  for 
information  about  or  for  access  to  or 
correction  or  amendment  of  records.  An 
appeal  shall  be  filed  within  30  calendar 
days  after  receipt  of  the  denial.  When 
an  appeal  is  filed  by  mail  the  postmark 
is  conclusive  as  to  timeliness.  The 
appeal  shall  be  in  writing  and  must  be 
signed  by  the  individual.  The  words 
“PRIVACY  ACT  APPEAL”  should 
appear  in  capital  letters  on  the  envelope 
and  the  letter.  Appeals  of  denials 
relating  to  records  maintained  in 
government-wide  systems  of  records 
reported  by  the  OPM,  shall  be  filed,  as 
appropriate,  with  the  Assistant  Director 
for  Agency  Compliance  and  Evaluation, 
Office  of  Personnel  Management  (OPM), 
1900  E  Street,  NW.,  Washington.  DC 
20415.  All  other  appeals  relating  to  DOE 
records  shall  be  directed  to  the  Director, 
Office  of  Hearings  and  Appeals  (OHA), 
Department  of  Energy,  Headquarters, 
Washington,  DC. 

(b)  An  appeal  not  addressed  and 
marked  as  specified  in  paragraph  (a)  of 
this  section  shall  be  forwarded 
immediately  to  the  Assistant  Director 
for  Agency  Compliance  and  Evaluation. 
OPM,  or  the  Director,  OHA.  as 
appropriate.  An  appeal  that  is  not 
properly  addressed  by  an  individual 
shall  not  be  deemed  to  have  been 
received  for  purposes  of  time  periods  in 
this  section  imtil  actual  receipt  of  the 
appeal  by  the  Assistant  Director,  OPM. 
or  the  Director,  OHA.  In  each  instance 
when  an  appeal  so  forwarded  is 
received,  the  individual  filing  the  appeal 
shall  be  notified  that  the  appeal  was 
improperly  addressed  and  the  date 
when  the  appeal  was  received  by  the 
Assistant  Director,  OPM,  or  the  Director, 
OHA. 
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(c)  The  appeal  shall  include  the 
following: 

(1)  A  copy  of  the  original  request  for 
access  or  for  amendment; 

(2)  A  copy  of  the  initial  denial;  and 

(3)  A  statement  of  the  reasons  why 
the  initial  denial  is  believed  to  be  in 
error. 

(d)  The  records  or  record  to  which  the 
individual  was  denied  access,  or  which 
was  requested  to  be  corrected  or 
amended,  will  be  supplied  to  the 
appropriate  appeal  authority  by  the 
Privacy  Act  Officer  who  issued  the 
initial  denial.  While  such  records 
normally  will  comprise  the  entire  record 
on  appeal,  the  appeal  authority  may 
seek  such  additional  information  as  is 
necessary  to  assure  that  the  Hnal 
determination  is  fair  and  equitable. 

(e)  No  personal  appearance  or  hearing 
on  appeal  will  be  allowed. 

(f)  The  appropriate  appeal  authority 
for  DOE  records  shall  act  upon  the 
appeal  and  issue  a  Hnal  determination 
in  writing  no  later  than  20  working  days 
from  the  date  on  which  the  appeal  is 
received.  However,  the  appeal  authority 
may  extend  the  ten-day  period  upon  a 
determination  that  a  fair  and  equitable 
review  cannot  be  made  within  that 
period.  In  such  cases  the  individual  shall 
be  advised  in  writing  of  the  reason  for 
the  extension  and  of  the  estimated  date 
liy  which  a  final  determination  will  be 
issued.  The  final  determination  shall  be 
issued  not  later  than  the  30th  working 
(Jay  after  receipt  of  the  appeal  unless 
unusual  circumstances,  as  deHned  in 

§  1008.7,  are  present,  whereupon  an 
additional  30  days  may  be  extended. 

(g)  If  an  appeal  of  a  denial  of  access  is 
granted,  a  copy  of  the  determination 
shall  be  transmitted  promptly  to  the 
individual,  the  Privacy  Act  Officer  and 
the  appropriate  System  Manager.  Upon 
receipt  of  the  determination,  the  Privacy 
Act  Officer  promptly  shall  take  action 
consistent  with  §  1008.8. 

(h)  If  an  appeal  of  a  denial  of 
correction  or  amendment  is  granted,  the 
final  determination  shall  identify  the 
specific  corrections  or  amendments  to 
be  made.  A  copy  of  the  determination 
shall  be  transmitted  promptly  to  the 
individual,  the  Privacy  Act  Officer  and 
the  appropriate  System  Manager.  Upon 
receipt  of  the  determination,  the  Privacy 
Act  Officer  promptly  shall  take  steps  to 
insure  that  the  actions  set  forth  in 

§  1008.10  (a)  and  (b)  are  taken. 

(i)  If  the  appeal  of  a  denial  of  access  is 
denied,  the  final  determination  shall 
state  the  reasons  for  the  denial  and  shall 
be  transmitted  promptly  to  the 
individual,  the  Privacy  Act  Officer  and 
the  appropriate  System  Manager.  The 
determination  shall  also  include  a 
statement  identifying  the  right  of  the 


individual  to  administrative  and  judicial 
review  pursuant  to  5  U.S.C.  552a(g)(l)(B) 
as  limited  by  5  U.S.C.  552a(g)(5). 

(j)  If  the  appeal  of  a  denial  of 
correction  or  amendment  is  denied,  the 
final  determination  shall  state  the 
reasons  for  the  denial  and  shall  be 
transmitted  promptly  to  the  individual, 
the  Privacy  Act  Officer  and  the 
appropriate  System  Manager. 

(1)  The  determination  also  shall 
include  the  following: 

(1)  Notice  of  the  right  of  the  individual 
to  file  with  the  Privacy  Act  Officer  a 
concise,  signed  statement  of  reasons  for 
disagreeing  with  the  final  determination, 
receipt  of  which  statement  will  be 
acknowledged  by  the  Privacy  Act 
Officer. 

(ii)  An  indication  that  any 
disagreement  statement  filed  by  the 
individual  will  be  noted  and  appended 
to  the  disputed  record  and  that  a  copy  of 
the  statement  will  be  provided  by  the 
Privacy  Act  Officer  or  the  System 
Manager,  as  appropriate,  to  persons  and 
agencies  to  which  the  record  is 
disclosed  subsequent  to  the  date  of 
receipt  of  such  statement; 

(iii)  An  indication  that  the  DOE  shall 
append  to  any  disagreement  statement 
filed  by  the  individual  a  copy  of  the  final 
determination  or  a  summary  thereof, 
which  determination  or  siunmary  also 
will  be  provided  to  persons  and 
agencies  to  which  the  disagreement 
statement  is  disclosed;  and, 

(iv)  A  statement  of  the  right  of  the 
individual  to  administrative  and  judicial 
review  under  5  U.S.C.  552a(g)(l](B],  as 
limited  by  5  U.S.C.  552a(g)(5]. 

(2)  Although  a  copy  of  the  final 
determination  or  a  summary  thereof  will 
be  treated  as  part  of  the  individual’s 
record  for  purposes  of  disclosure  in 
instances  where  the  individual  has  filed 
a  disagreement  statement,  it  will  not  be 
subject  to  correction  or  amendment  by 
the  individual. 

(3)  Where  an  individual  files  a 
statement  of  disagreement  consistent 
with  paragraph  (j)(l)  of  this  section,  the 
Privacy  Act  Officer  shall  take  steps  to 
insure  that  the  actions  provided  in 
paragraph  (j)(l}(i),  (ii)  and  (iii)  of  this 
section  are  taken. 

§  1008.12  Exemptions. 

(a)  General  exemptions.  (1)  Generally. 
5  U.S.C.  552a(j)(2)  allows  the  exemption 
of  any  system  of  records  within  the  DOE 
from  any  part  of  section  552a  except 
subsections  (b),  (c)(1)  and  (2).  (e)(4)(A) 
through  (F)  (e)(6),  (7),  (9),  (10),  and  (11), 
and  (i)  of  the  Act  if  the  system  of 
records  is  maintained  by  a  DOE 
component  which  performs  as  its 
principal  function  any  activity 
pertaining  to  the  enforcement  of 


criminal  laws,  including  police  efforts  to 
prevent,  control,  or  reduce  crime  or  to 
apprehend  criminals,  and  which  consists 
of  (i)  information  compiled  for  the 
purpose  of  identifying  individual 
criminal  offenders  and  alleged 
offenders;  (ii)  information  compiled  for 
the  purpose  of  a  criminal  investigation, 
including  reports  of  informants  and 
investigators,  and  associated  with  an 
identifiable  individual;  or  (iii)  reports 
identifiable  to  an  individual  compiled  at 
any  stage  of  the  process  of  enforcement 
of  the  criminal  laws  from  arrest  or 
indictment  through  release  from 
supervision. 

(2)  Applicability  of  general 
exemptions  to  DOE  systems  of  records, 
(i)  Investigative  Files  of  the  Inspector 
General  (DOE-54}.  This  system  of 
records  is  being  exempted  pursuant  to 
subsection  (j)(2)  of  the  Act  in  order  to 
aid  the  Office  of  the  Inspector  General 
in  the  performance  of  its  law 
enforcement  function.  The  system  is 
exempted  fi'om  subsections  (c)(3)  and 

(4);  (d)(lH4):  (e)(l)-(3);  (4)(G).  (H),  and 
(I);  (5)  and  (8);  and  (g)  of  the  Act.  The 
system  is  exempt  fi’om  these  provisions 
for  the  following  reasons:  notifying  an 
individual  at  the  individual’s  request  of 
the  existence  of  records  in  an 
investigative  file  pertaining  to  such 
individual,  or  granting  access  to  an 
investigative  file  could  (A)  interfere  with 
investigative  and  enforcement 
proceedings  and  with  co-defendants’ 
right  to  a  fair  trial;  (B)  disclose  the 
identity  of  confidential  sources  and 
reveal  confidential  information  supplied 
by  these  sources;  and  (C)  disclose 
investigative  techniques  and  procedures. 

(b)  Specific  exemptions.  Subsection 

(k)  of  the  Privacy  Act  establishes  seven 
categories  of  systems  of  records  which 
may  be  exempted  from  subsections 

(c)(3),  (d),  (e)(1),  (e)(4)(G),  (H)  and  (I), 
and  (7)  of  the  Act,  The  Department  has 
exempted  systems  of  records  under  four 
of  these  provisions,  as  follows:  (1) 
Classified  material,  (i)  Subsection  (k)(l) 
permits  exemption  of  systems  of  records 
that  are  specifically  authorized  under 
criteria  established  under  statute  or 
Executive  Order  to  be  kept  secret  in  the 
interest  of  national  defense  or  foreign 
policy,  and  are  in  fact  properly 
classified  pursuant  to  such  statute  or 
Executive  Order.  Restricted  Data  and 
Formerly  Restricted  Data  under  the 
Atomic  Energy  Act  of  1954,  as  amended, 
are  included  in  this  exemption. 

(ii)  The  DOE  systems  of  records  listed 
below  have  been  exempted  under 
subsection  (k)(l)  to  the  extent  they 
contain  classified  information,  in  order 
to  prevent  serious  damage  to  the 
national  defense  or  foreign  policy  that 
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could  arise  from  providing  individuals 
access  to  classified  information. 

Systems  exempted  under  subsection 
(k)(l)  are — 

(A)  Alien  Visits  and  Participation 
(DOE-52). 

(B)  Clearance  Board  Cases  (DOE-46). 

(C)  Security  Correspondence  Files 
(DOE-49). 

(D)  Foreign  Travel  Records  (DOE-27) 

(E)  Legal  Files  (Claims,  Litigations, 
Criminal  Violation,  Patents,  and  other 
Legal  Files)  (DOE-41). 

(F)  Personnel  Security  Clearance  Files 
(DOE-43). 

(G)  Personnel  Security  Clearance 
Index  (Automated)  (DOE-42). 

(H)  Special  Access  Authorization  for 
Categories  of  Classified  Information 
(DOE-44). 

(2)  Investigatory  material  compiled 
for  law  enforcement  purposes,  (i) 
Subsection  (k)(2)  permits  the  exemption 
of  investigatory  material  compiled  for 
law  enforcement  purposes,  provided, 
however,  that  if  any  individual  is  denied 
any  right,  privilege,  or  benefit  to  which 
he  would  otherwise  be  entitled  by 
Federal  law,  or  for  which  he  would 
otherwise  be  eligible,  as  a  result  of  the 
maintenance  of  such  material,  such 
material  shall  be  provided  to  such 
individual,  except  to  the  extent  that  the 
disclosure  of  such  material  would  reveal 
the  identity  of  a  source  who  furnished 
information  to  the  Government  under  an 
express  promise  that  the  identity  of  the 
source  would  be  held  in  confidence,  or, 
prior  to  September  27, 1975,  under  an 
implied  promise  that  the  identity  of  the 
source  would  be  held  in  confidence. 

(ii)  The  DOE  systems  of  records  listed 
below  have  been  exempted  under 
subsection  (k)(2)  in  order  to  prevent 
subjects  of  investigation  from  frustrating 
the  investigatory  process  through  access 
to  records  about  themselves  or  as  a 
result  of  learning  the  identities  of 
confidential  informants;  to  prevent 
disclosure  of  investigative  techniques;  to 
maintain  the  ability  to  obtain  necessary 
information;  and  thereby  to  insure  the 
proper  functioning  and  integrity  of  law 
enforcement  activities.  Systems  of 
records  exempted  under  subsection 
(k)(2)  are — 

(A)  Alien  Visits  and  Participation 
(DOE-52). 

(B)  Clearance  Board  Cases  (DOE-46). 

(C)  Security  Correspondence  Files 
(DOE-49). 

(D)  Foreign  Travel  Records  (DOE-27). 

(E)  Legal  Files  (Claims,  Litigation, 
Criminal  Violations,  Patents,  and  other 
Legal  Files)  (DOE-41). 

(F)  Personnel  Security  Clearance  Files 
(DOE-43). 

(G)  Personnel  Security  Clearance 
Index  (Automated)  (DOE-42). 


(H)  Special  Access  Authorization  for 
Categories  of  Classified  Information 
(DOE-44). 

(I)  DOE  Personnel  and  General 
Employment  Records  (DOE-1)  (only 
personnel  investigative  records 
concerning  current  and  former  DOE 
employees  and  applicants  for 
employment  by  DOE). 

(J)  Investigative  Files  of  the  Inspector 
General  (DOE-54)  (only  investigative 
records  concerning  past  and  present 
DOE  employees). 

(3)  Investigatory  material  compiled 
for  determining  suitability  for  Federal 
employment,  (i)  Subsection  (k)(5) 
permits  exemption  of  systems  of  records 
that  contain  investigatory  material 
compiled  solely  for  the  purpose  of 
determining  suitability,  eligibility,  or 
qualification  for  Federal  civilian 
employment,  military  service,  Federal 
contracts,  or  access  to  classified 
information,  but  only  to  the  extent  that 
the  disclosure  of  su^  material  would 
reveal  the  identity  of  a  source  who 
furnished  information  to  the 
Government  under  an  express  promise 
that  the  identity  of  the  source  would  be 
held  in  confidence,  or,  prior  to 
September  27, 1975,  under  an  implied 
promise  that  the  identity  of  the  source 
would  be  held  in  confidence. 

(ii)  The  DOE  systems  of  records  listed 
below  have  been  exempted  under 
subsection  (k)(5)  to  the  extent  they 
contain  the  kinds  of  reco'rds  described  in 
subsection  (k)(5)  in  order  to  maintain 
doe's  ability  to  obtain  candid 
information  on  candidates  for 
employment,  contracts,  or  access  to 
classified  information  and  to  fulfill 
commitments  made  to  sources  to  protect 
the  confidentiality  of  information,  and 
thereby  to  facilitate  proper  selection  or 
continuation  of  the  best  applicants  or 
persons  for  a  given  position  or  contract. 
Systems  exempted  under  subsection 
(k)(5)  are — 

(A)  DOE  Personnel  and  General 
Employment  Records  (DOE-1); 

(B)  Personnel  Security  Clearance  Files 
(DOE-43); 

(C)  Investigative  Files  of  the  Inspector 
General  (DOE-54); 

(D)  Alien  Visits  and  Participation 
(DOE-52); 

(E)  Clearance  Board  Cases  (DOE-46); 

(F)  Security  Correspondence  Files 
(DOE-49); 

(G)  Foreign  Travel  Records  (DOE-27); 

(H)  Legal  Files  (Claims,  Litigation, 
Criminal  Violations,  Patents,  and  other 
Legal  Files)  (DOE-41); 

(I)  Personnel  Security  Clearance  Index 
(Automated)  (DOE-42); 

(I)  Special  Access  Authorization  for 
Categories  of  Classified  Information 
(DOE-44); 


(K)  DOE  Personnel:  Supervisor- 
Maintained  Personnel  Records  (DOE-2]: 

(L)  Applications  for  DOE  Employment 
(DOE-4). 

(4)  Testing  or  examination  material. 

(i)  Subsection  (k](6]  permits  exemption 
of  systems  of  records  that  include 
testing  or  examination  material  used 
solely  to  determine  individual 
qualifications  for  appointment  or 
promotion  in  the  Federal  service,  the 
disclosure  of  which  would  compromise 
the  objectivity  or  fairness  of  the  testing 
of  examination  process. 

(ii)  The  DOE  systems  of  records  listed 
below  have  been  exempted  to  the  extent 
they  contain  testing  or  examination 
material  in  order  to  protect  the  integrity 
of  the  personnel  testing  and  evaluation 
process  and  to  avoid  providing 
individuals  with  unfair  advantage,  by 
premature  or  unfair  disclosure  of  testing 
or  rating  information.  Systems  exempted 
under  Subsection  (k)(6)  are — 

(A)  (DOE-2)  DOE  Perso'inel: 
Supervisor-Maintained  Personnel 
Records. 

(B)  (DOEr-4)  Applications  for  DOE 
Employment. 

(C)  (DOE-1)  DOE  Personnel  and 
General  Employment  Records. 

(c)  Application  of  exemptions  to 
particular  requests.  (1)  The  Privacy  Act 
Officer,  consistent  with  the 
recommendation  of  the  System  Manager 
and  with  concurrence  of  the  appropriate 
General  Counsel,  may  make  available 
records  which  the  DOE  is  authorized  to 
withhold  imder  this  section. 

(2)  With  respect  to  records  containing 
material  or  information  that  would 
reveal  the  identity  of  a  source  who  was 
given  an  assurance  of  confidentiality,  a 
determination  to  make  records  available 
pursuant  to  paragraph  (c)(1)  of  this 
section  shall  be  made  only  if  the  source 
consents  to  the  release  of  such 
information  to  the  individual,  or  if  it  is 
determined  that  the  material  or 
information  is  not  adverse  or 
detrimental  to  the  individual,  or  for  good 
cause  shown.  The  exercise  of  discretion 
with  respect  to  waiver  of  the  exemption 
shall  be  final. 

(3)  Prior  to  making  a  determination  to 
deny  access  to  a  record  in  a  system  of 
records  covered  by  exemption  (k)(l)  for 
classified  material  (see  paragaph  (b)(1) 
of  this  section),  the  System  Manager 
shall  consult  with  the  Director,  Division 
of  Classification,  to  verify  the  current 
classification  status  of  the  information 
in  the  requested  record. 

§1008.13  Fees. 

(a)  The  only  fees  to  be  charged  to  or 
collected  from  an  individual  under  the 
provisions  of  this  part  are  for  copying 
records  at  the  request  of  the  individual. 
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The  fee  charged  shall  be  consistent  with 
the  fee  schedule  set  forth  in  paragraph' 

(b)  of  this  section. 

(1)  No  fees  shall  be  charged  or 
collected  for  the  following:  search  for 
and  retrieval  of  recprds:  review  of 
records;  copying  by  the  DOE  incident  to 
granting  access;  copying  at  the  initiative 
of  the  DOE  without  a  request  from  the 
individual;  copying  when  the  aggregate 
of  fees  for  copying  is  $25  or  less;  time 
spent  providing  copies;  transportation  of 
records  and  personnel;  and  first  class 
postage. 

(2)  It  is  the  policy  of  the  DOE  to 
provide  an  individual  with  one  copy  of 
each  record  corrected  or  amended 
pursuant  to  request  without  charge. 

(3)  As  required  by  the  Office  of 
Personnel  Management  in  its  published 
regulations  implementing  the  Act,  the 
DOE  will  charge  no  fee  for  a  single  copy 
of  a  personnel  record  covered  by  that 
Commission's  Government- wide 
published  notice  of  systems  of  records. 

(b)  The  schedule  of  fees  is  as  follows: 

(1)  $.10  per  copy  of  each  page. 

(2)  For  other  forms  of  copying  and 
ether  forms  of  materials  (e.g.,  cassettes, 
computer  materials],  the  direct  cost  of 
the  materials,  personnel,  and  equipment 
shall  be  charged,  but  only  with  prior 
s[>ecific  approval  of  the  person  making 
the  request,  when  such  charges  would 
be  in  excess  of  $25. 

(c)  The  Privacy  Act  Officer  may,  upon 
application  by  an  individual,  furnish  any 
records  without  charge  or  at  a  reduced 
rate,  if  the  Privacy  Act  Officer 
determines  that  such  waiver  Or 
reduction  of  fees  is  in  the  public  interest. 

(d)  Payment  shall  be  made  by  check 
JT  money  order  payable  to  the  United 
States  Department  of  Energy. 

(e)  Advance  payment  of  all  or  part  of 
the  fees  may  be  required  at  the 
discretion  of  the  Privacy  Act  Officer. 
Unless  the  individual  requesting  the 
copies  specifically  states  that  he  is 
willing  to  pay  whatever  fees  are 
assessed  for  meeting  the  request  or, 
alternatively,  specifies  an  amount  in 
excess  of  $25  that  he  is  willing  to  pay 
and  which  in  fact  covers  the  anticipated 
fees  for  meeting  the  request,  a  request 
that  is  expected  to  involve  assessed  fees 
in  excess  of  $25  shall  not  be  deemed  to 
have  been  received,  for  purposes  of  the 
time  periods  specified  in  §  1008.7  and 

§  1008.10  until  the  individual  making  the 
request  is  notiHed  of  the  anticipated 
cost,  agrees  to  bear  it,  and  makes  any 
advance  deposit  required.  Such 
notiHcation  shall  be  made  by  the 
Privacy  Act  Officer  as  promptly  as 
possible  after  receipt  of  the  request. 


§  1008.14  Requests  under  false  pretenses. 

Subsection  (i)(3)  of  the  Act  provides 
that  any  person  who  knowingly  and 
willingly  requests  or  obtains  any  record 
concerning  an  individual  from  an  agency 
under  false  pretenses  shall  be  quilty  of  a 
misdeamenaor  and  fined  not  more  than 
$5,000. 

§  1008.15'  Civil  remedies. 

Subsection  (g)  of  the  Act  provides  that 
an  individual  may  bring  suit  against  the 
DOE  for  a  violation  of  the  Privacy  Act, 
as,  follows: 

(a)  If  the  DOE  refuses  to  grant  a 
request  for  access  to  an  individual’s 
records,  the  court  may  order  the  DOE  to 
provide  the  individual  with  access  to  his 
or  her  records  and  award  reasonable 
litigation  costs  and  attorney’s  fees. 

(b)  If  the  DOE  refuses  to  amend  a 
record  or  fails  to  review  an  amendment 
request  as  required  by  subsection  {d)(3) 
of  the  Act,  the  court  may  order  the  DOE 
to  make  the  amendment  and  award 
reasonable  litigation  costs  and 
attorney’s  fees. 

(c)  If  the  DOE  makes  an  adverse 
determination  based  on  a  record  which 
is  not  maintained  in  an  accurate,  timely, 
relevant,  and  complete  manner,  the 
individual  may  be  awarded  actual 
damages  of  at  least  $1,000.  In  order  to 
prevail,  the  individual  must  show  that — 

(1)  The  DOE’S  action  was  willful  and 
intentional;  and 

(2)  The  adverse  determination  was 
based  on  the  faulty  record. 

(d)  If  the  DOE  fails  to  comply  with 
any  other  provision  of  the  Privacy  Act  or 
agency  rule  promulgated  under  the  Act, 
in  such  a  way  as  to  have  an  adverse 
effect  on  the  individual,  the  court  may 
award  actual  damages  of  at  least  $1,000. 
In  order  to  prevail,  the  individual  must 
show  that — 

(1)  The  DOE'S  action  was  willful  and 
intentional;  and 

(2)  The  agency’s  action  had  an 
adverse  effort  on  the  individual;  and 

(3)  The  adverse  effect  was  causally 
related  to  the  DOE’s  action. 

Subpart  C— Disclosure  to  Third  Parties 

§  1008.16  Prohibition  against  disclosure. 

Except  as  provided  in  §  1008.17,  the 
DOE  shall  not  disclose  any  record  which 
is  contained  in  a  system  of  records,  by 
any  means  of  communication,  to  any 
agency  or  to  any  person  other  than  the 
individual  who  is  the  subject  of  the 
record. 

§  1008.17  Conditions  of  disclosure. 

(a)  Notwithstanding  the  prohibition 
contained  in  §  1008.16,  the  DOE  may 
disclose  records  covered  by  this  part  (1) 
to  the  individual  to  whom  the  record 


pertains  or  to  an  agency  or  (2)  to  a 
person  other  than  the  individual  where 
he  has  given  his  prior  written  consent  to 
the  disclosure  or  has  made  a  written 
request  for  such  disclosure. 

(b)  Notwithstanding  the  prohibition 
contained  in  §  1008.16  the  DOE  may  also 
disclose  records  covered  by  this  part 
whenever  the  disclosure  is; 

(IJTo  officers  and  employees  of  the 
DOE ’who  have  a  heed  for  the  record  in 
the  performance  of  their  duties; 

(2)  Required  under  the  Freedom  of 
Information  Act  (5  U.S.C.  552J; 

(3)  For  a  routine  use  (as  defined  in 
§  1008.2)  which  is  described  in  the 
Federal  Register  notice  for  the  system  of 
records  which  the  disclosure  is  to  be 
made; 

(4)  To  the  Bureau  of  the  Census  for 
purposes  of  planning  or  carrying  out  a 
census  or  survey  or  related  activity 
pursuant  to  the  provisions  of  Title  13  of 
the  United  States  Code; 

(5)  To  a  recipient  who  has  provided 
the  agency  with  advance  adequate 
written  assurance  that  the  record  will  be 
used  solely  as  a  statistical  research  or 
reporting  record,  and  the  record  is  to  be 
transferred  in  a  form  that  is  not 
individually  identifiable; 

(6)  To  the  National  Archives  of  the 
United  States  as  a  record  which  has 
sufficient  historical  or  other  value  to 
warrant  its  oostinued  preservation  by 
the  United  States  Government,  or  for 
evaluation  by  the  Administrator  of 
General  Services  or  his  designee  to 
determine  whether  the  record  has  such 
value; 

(7)  To  another  agency  or  to  an 
instrumentality  of  any  governmental 
jurisdiction  within  or  under  the  control 
of  the  United  States  for  a  civil  or 
criminal  law  enforcement  activity  if  the 
activity  is  authorized  by  law  and  if  the 
head  of  the  agency  or  instrumentality 
has  made  a  written  request  to  the  DOE 
specifying  the  particular  portion  desired 
and  the  law  enforcement  activity  for 
which  the  record  is  sought; 

(8)  To  a  person  pursuant  to  a  showing 
of  compelling  circumstances  affecting 
the  health  or  safety  of  an  individual  if 
upon  such  disclosure  notification  is 
transmitted  to  the  last  known  address  of 
such  individual; 

(9)  To  either  House  of  Congress,  or  to 
any  committee  or  subcommittee  thereof, 
any  joint  committee  of  Congress  or 
subcommittee  of  any  such  joint 
committee,  to  the  extent  of  matter 
within  its  jurisdiction; 

(10)  To  the  Comptroller  General,  or 
any  of  his  authorized  representatives,  in 
the  course  of  the  performance  of  the 
duties  of  the  General  Accounting  Office; 

(11)  Pursuant  to  the  order  of  a  court  of 
competent  jurisdiction. 
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(c)  Notwithstanding  the  prohibition 
contained  in  section  §  1008.16  of  this 
part,  the  DOE  may  also  disclose  records 
covered  by  this  part  when  disseminating 
a  corrected  or  amended  record  or 
notation  of  a  disagreement  statement  as 
required  by  subsection  (c)(4)  of  the  Act. 

§  1008.18  Accounting  for  disclosures. 

(a)  For  each  disclosure  of  information 
contained  in  a  system  of  records  under 
his  control,  except  disclosures  to 
authorized  ofhcers  and  employees  of 
DOE  and  disclosures  required  by  the 
Freedom  of  Information  Act,  the 
appropriate  System  Manager  shall  keep 
an  accurate  accounting  of: 

(1)  The  date,  nature,  and  purposes  of 
each  disclosure  of  a  record  made  to  any 
person  or  to  another  agency:  and 

(2)  The  name  and  address  of  the 
person  or  agency  to  which  the 
disclosure  was  made. 

(b)  The  accounting  shall  be  retained 
for  at  least  five  years  or  the  life  of  the 
record,  whichever  is  longer,  after  the 
disclosure  for  which  the  accounting  is 
made. 

(c)  The  accounting  described  in 
paragraph  (a)  of  this  section  shall  be 
made  available  to  the  individual  named 
in  the  record  upon  written  request  to  the 
Privacy  Act  Officer  at  the  appropriate 
DOE  location  listed  at  §  100B.2(c)  of  this 
part.  However,  the  accounting  shall  not 
be  revealed  with  respect  to  disclosures 
made  under  §  1008.17(b)(7)  of  this  part, 
pertaining  to  law  enforcement  activity; 
or  with  respect  to  disclosures  involving 
system  of  records  for  which  DOE  had 
claimed  an  exemption  fiom  certain 
requirements  of  the  Act  as  provided  in 
§  1008.12  of  this  part 

(d)  Whenever  an  amendment  or 
correction  of  a  record  or  a  notation  of 
dispute  concerning  the  accuracy  of 
records  is  made  by  the  DOE  in 
accordance  with  |1008.10(a)(2)(iv)  and 
§  1008 11(g)  of  this  part  DOE  shall 
inform  any  person  or  other  agency  to 
whom  the  record  was  previously 
disclosed  if  an  accounting  of  the 
disclosure  was  made  pursuant  to  the 
requirements  of  paragraph  (a)  of  this 
section,  unless  the  disclosure  was  made 
pursuant  to  section  §  1008.17(b)(7)  of 
this  part;  or  the  disclosure  involved  a 
system  of  records  of  which  DOE  has 
claimed  an  exemption  fi'om  certain 
requirements  of  the  Act  as  provided  in 
§  1008.12  of  this  part 

(e)  The  System  Manager  shall  make 
reasonable  efforts  to  serve  notice  on  an 
individual  when  any  record  containing 
information  about  such  individual  in  a 
DOE  system  of  records  is  disclosed  to 
any  person  under  compulsory  legal 
process  when  such  process  becomes  a 
matter  of  public  record. 


(f)  Prior  to  disclosing  any  record  about 
an  individual  to  any  person  other  than 
an  agency,  unless  the  disclosure  is 
pursuant  to  the  Freeedom  of  Information 
Act  the  System  Manager  shall  make 
reasonable  efforts  to  assure  that  each 
record  is  accurate,  complete,  timely,  and 
relevant  for  DOE’s  purposes. 

§  1008.19  Criimiriial  pmall1ileS'--ii!n9proper 

disclosure. 

Subsection  (i)(l)  of  the  Act  provides 
that  a  Federal  employee  who  willfully 
discloses  information  subject  to  the 
Privacy  Act  in  violation  of  the  Act  or 
rules  promulgated  under  it  shall  be 
guilty  of  a  misdemeanor  and  fined  up  to 
$5,000. 

Subpart  D — IMamteinatnae  amiidl 
Establishment  of  Systems  of  Records 

§  1006.20  Conten'i  of  systems  of  irecords. 

(a)  The  DOE  will  maintain  in  its 
records  only  such  information  about  an 
individual  as  is  relevant  and  necessary 
to  accomplish  a  purpose  DOE  is 
required  to  accomplish  by  statute  or  by 
Executive  Order  of  the  President  unless 
an  exemption  ot  this  requirement  has 
been  claimed  by  DOE  as  provided  in 

§  1008.12  of  this  part. 

(b)  The  DOE  will  maintain  no  record 
describing  how  any  individual  exercises 
rights  guaranteed  by  the  First 
Amendment  unless  expressly  authorized 
by  statute  or  by  the  individual  about 
whom  the  record  is  maintained  or  unless 
it  is  pertinent  to  and  within  the  scope  of 
an  authorized  law  enforcement  activity. 

(c)  The  DOE  will  maintain  all  records 
that  are  used  by  it  to  make  any 
determination  about  any  individual  with 
such  accuracy,  relevance,  timeliness  and 
completeness  as  is  reasonably 
necessary  to  assure  fairness  to  the 
individual  in  such  determination. 

§  1008.21  Cofleclion  of  Infoniinaion  Iby 
DOE  about  an  individual  foir  a  system  of 

records. 

(a)  The  DOE  will  collect  information, 
to  the  greatest  extent  practicable, 
directly  from  the  subject  individual 
when  Ae  use  of  the  information  may 
result  in  adverse  determinations  about 
an  individual’s  rights,  benefits  and 
privileges  under  Federal  programs, 
unless  an  exemption  from  the  Act  to  this 
requirement  has  been  claimed  by  DOE 
as  provided  in  §  1008.12 

(b)  Unless  an  exemption  from  the  Act 
has  been  claimed  by  DOE  under 
subsection  (j)(2),  as  provided  in 

§  1008.12,  DOE  shall  inform  each 
individual  whom  it  asks  to  supply 
information,  on  the  form  or  other  means 
by  which  it  uses  to  collect  the 
information,  or  on  a  separate  form  that 


can  be  retained  by  the  individual,  of  the 
following: 

(1)  The  authority  (whether  granted  by 
statute  or  by  Executive  Order  of  the 
President)  that  authorizes  the 
solicitation  of  the  information  and 
whether  the  provision  of  such 
information  is  mandatory  or  voluntary; 

(2)  The  principal  purpose  or  purposes 
for  which  the  information  is  intended  to 
be  used: 

(3)  The  routine  uses  that  may  be  made 
of  the  information,  as  published  in  the 
Federal  Register  pursuant  to  the 
requirements  of  Ae  Act;  and 

(4)  The  effect  on  the  individual,  if  any, 
of  not  providing  all  or  any  part  of  the 
requested  information. 

§  1008.22  Use  and  collection  off  social 
security  numbers. 

(a)  The  System  Manager  of  each 
system  of  records  which  utilizes  social 
security  numbers  as  a  method  of 
identification  without  statutory 
authorization  or  authorization  by 
regulation  adopted  prior  to  January  1. 
1975,  shall  revise  the  system  to  avoid 
future  collection  and  use  of  the  social 
security  numbers. 

(b)  Heads  of  Headquarters  Divisions 
and  Offices  and  heads  of  the  other  DOE 
locations  shall  insure  that  employees 
authorized  to  collect  information  fi'om 
individuals  are  advised  that  individuals 
may  not  be  required  to  furnish  social 
security  numbers  without  statutory 
authorization,  and  that  individuals  who 
are  requested  to  provide  social  security 
numbers  voluntarily  must  be  advised 
that  furnishing  the  number  is  not 
required  and  that  no  penalty  or  denial  of 
benefits  will  flow  fix)m  the  refusal  to 
provide  it. 

§  1008.23  Public  notice  of  systems  of 
records. 

(a)  The  DOE  shall  publish  in  the 
Federal  Register  at  least  annually  a 
notice  of  the  existence  and  character  of 
each  of  its  systems  of  records,  which 
notice  shall  include: 

(1)  The  name  and  location  of  the 
system; 

(2)  The  categories  of  individuals  on 
whom  records  are  maintained  in  the 
system; 

(3)  The  categories  of  records 
maintained  in  the  system; 

(4)  Each  routine  use  of  the  records 
contained  in  the  system,  including  the 
categories  of  users  and  the  purpose  of 
such  use,  subject  to  paragraph  (d)  of  this 
section; 

(5)  The  policies  and  practices  of  the 
DOE  regarding  storage,  retrievability, 
access  controls,  retention,  and  disposal 
of  the  records; 
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(6)  the  title  and  business  address  of 
the  DOE  official  who  is  responsible  for 
the  system  of  records: 

(7)  The  DOE  procedures  whereby  an 
individual  can  be  notified  at  his  request 
if  the  system  of  records  contains  a 
record  pertaining  to  him; 

(8)  The  DOE  procedures  whereby  an 
individual  can  be  notified  at  his  request 
about  how  he  can  gain  access  to  any 
record  pertaining  to  him  contained  in 
the  system  or  records,  and  how  he  can 
contest  its  content;  and 

(9)  the  categories  of  source  of  records 
in  the  systems. 

(b)  Notwithstanding  the  requirements 
of  paragraph  (a]  of  this  section,  the 
notice  of  systems  of  records  shall  not 
necessarily  include  the  information  in 
paragraphs  (a)  (7]-(9]  of  this  section  if 
DOE  has  claimed  a  general  or  specific 
exemption  from  the  requirements  of  the 
Act,  as  provided  in  §  1008.12. 

(c)  Copies  of  the  notices  as  printed  in 
the  Federal  Register  shall  be  available 
at  the  DOE  locations  listed  at 

§  1008.2(c).  Requests  by  mail  for  copies 
of  such  notices  should  be  sent  to  Privacy 
Act  Officer,  Headquarters,  U.S. 
Department  of  Energy,  Washington,  DC. 
20585.  The  first  copy  will  be  fu^shed 
free  of  charge.  For  each  additional  copy, 
the  costs  of  printing  and  handling  may 
be  charged. 

(d)  DOE  shall  publish  in  the  Federal 
Register  notice  of  any  new  routine  use 
or  intended  routine  use  of  a  record  in 
the  system  of  records,  at  least  30 
calendar  days  prior  to  the 
implementation  of  any  new  routine  use 
of  a  record  in  a  system  of  records,  or  at 
least  30  calendar  days  prior  to 
publication  of  the  annual  notice  of  such 
routine  uses,  as  provided  in  paragraph 
(a)  of  this  section,  an  opportunity  for 
interested  persons  to  submit  written 
comments  consisting  of  data,  views,  or 
arguments  regarding  such  use  to  DOE, 
shall  be  provided. 

§  1008.24  Criminal  penalties— failure  to 
publish  a  system  notice. 

Subsection  (i)(2}  of  the  Act  provides 
that  an  agency  officer  or  employee  who 
willfully  maintains  a  system  of  records 
without  publishing  a  system  notice  as 
required  by  subsection  (e)(4]  of  the  Act 
shall  be  guilty  of  a  misdemeanor  and 
fined  up  to  $5,000. 
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